Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/34352e3233372e3234322e302f32332d3233203d3e20323638333037.roa
File:                     34352e3233372e3234322e302f32332d3233203d3e20323638333037.roa (raw, json)
Hash identifier:          jC5P8gsNuFJ+WqEd21Xp/Zm9KMT5GW6jPiGIvcefgt4=
Subject key identifier:   6D:A8:AE:7C:6E:46:51:D6:6D:E1:F4:88:60:AC:86:7E:C6:4A:AF:63
Certificate issuer:       /CN=435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30
Certificate serial:       5354C1872146C0F266A592369ABF0E6227F9D848
Authority key identifier: 43:5F:4B:40:AD:49:CD:DD:2B:95:80:A9:F5:EE:3C:C2:59:BF:9A:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/34352e3233372e3234322e302f32332d3233203d3e20323638333037.roa
Signing time:             Sun 21 Jul 2024 18:43:13 +0000
ROA not before:           Sun 21 Jul 2024 18:38:13 +0000
ROA not after:            Sun 20 Jul 2025 18:43:13 +0000
asID:                     268307
IP address blocks:        45.237.242.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.crl
                          rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:57:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:54:c1:87:21:46:c0:f2:66:a5:92:36:9a:bf:0e:62:27:f9:d8:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30
        Validity
            Not Before: Jul 21 18:38:13 2024 GMT
            Not After : Jul 20 18:43:13 2025 GMT
        Subject: CN=6DA8AE7C6E4651D66DE1F48860AC867EC64AAF63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:49:4a:72:55:f7:cb:f6:5d:91:a8:eb:48:79:
                    02:58:1d:14:d6:99:98:fa:e4:1c:ba:9c:63:c5:05:
                    0b:4c:aa:fc:af:3b:32:51:cb:a1:d3:29:34:fa:ef:
                    b0:13:58:c8:c8:b9:61:6b:16:4c:db:e8:b4:cd:b5:
                    4b:b2:ff:e3:83:63:c5:74:3f:66:da:22:fe:f7:7d:
                    a0:04:aa:a0:19:e6:e7:f0:ef:a9:c5:de:ba:78:48:
                    01:4f:68:d3:cc:6d:c2:ae:7c:32:82:32:02:76:40:
                    0c:08:08:b1:a1:62:62:67:f2:f8:ca:0a:0c:4b:e4:
                    a7:8f:0a:b7:72:36:64:82:9b:a1:92:68:2f:9a:b5:
                    50:b8:09:d9:e6:6d:6c:53:3d:f6:af:3f:d4:0a:e8:
                    de:b9:f9:91:62:8e:21:8b:76:ec:ac:22:ce:55:49:
                    14:8b:ee:29:3a:62:ea:37:84:48:54:ab:93:67:c2:
                    13:23:30:3d:e7:f8:f7:20:ac:98:2b:9b:ec:62:85:
                    45:5b:da:2a:e7:3c:9d:7d:a6:57:5e:f6:93:c4:49:
                    40:ce:6f:f7:78:d7:7e:30:e7:2f:2a:f2:46:3b:a7:
                    0b:7c:40:92:e4:d2:a0:04:78:55:f2:84:b9:6e:cb:
                    b4:f2:04:08:6c:2f:8a:49:1d:fd:0a:c8:eb:79:a4:
                    12:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A8:AE:7C:6E:46:51:D6:6D:E1:F4:88:60:AC:86:7E:C6:4A:AF:63
            X509v3 Authority Key Identifier:
                keyid:43:5F:4B:40:AD:49:CD:DD:2B:95:80:A9:F5:EE:3C:C2:59:BF:9A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/34352e3233372e3234322e302f32332d3233203d3e20323638333037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:dc:6f:0d:64:03:33:41:20:70:cc:57:d9:dc:83:b8:ee:64:
         7b:f1:d1:b9:0b:ea:23:76:8a:74:01:4c:32:2b:e5:50:b8:1f:
         9d:e7:0a:4f:eb:f7:35:8e:28:54:c9:7f:9d:ad:3c:b0:d0:0f:
         8a:aa:cc:31:25:3f:9b:c9:a9:c9:77:f3:84:0e:25:d9:c1:20:
         6f:b0:9a:ec:c4:0b:00:92:ad:a8:ce:fd:0d:e4:60:4a:c6:fc:
         37:71:41:36:a1:b2:a9:22:8f:6f:93:26:e9:67:53:73:62:fe:
         64:95:ce:6d:0b:67:4b:f7:a3:b2:94:dc:d4:5d:0e:0d:20:34:
         2a:06:3a:1a:9b:0b:76:28:84:82:89:85:da:1d:11:0a:2f:64:
         ea:ad:47:eb:f2:a3:34:d6:fc:12:85:a6:bc:ed:b0:78:77:08:
         45:37:6f:9a:a3:95:49:2b:f4:d3:d9:a6:59:a0:3f:a8:92:eb:
         0d:72:99:de:3b:89:f5:6c:e4:fd:80:aa:a8:5a:70:b2:3b:f6:
         35:ef:03:f9:eb:5e:16:a7:72:b8:06:d2:61:81:84:19:df:40:
         fa:10:26:8a:61:80:17:4e:26:a1:eb:93:b7:32:e3:6c:01:91:
         84:84:9f:8d:b1:16:10:61:67:7a:a1:87:52:e4:4d:c5:4b:f0:
         35:82:66:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:52 2024 by rpki-client on console-fra.rpki-client.org